Chrome Web Store
3Versions
1Code reviewed

No malware found

In code review (v1.4.0)

Our reviewer read version 1.4.0 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

40 indicators in this extension

40 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Live Server Web Extension, used by 200,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 high), led by other. It comes from a trusted publisher and was last updated in December 2024.

Key findings

  • High

    Other

    The bundled manifest uses Manifest V2 and includes host permissions directly in the permissions array, while the published CWS summary indicates Manifest V3 with a separate host_permissions field and an additional 'storage' permission. This discrepancy may be due to an update or listing error but is not inherently malicious.

Analyst notes

The extension is a legitimate developer tool for live reloading web pages. It uses broad host permissions to inject a content script on all sites, but only to establish a WebSocket connection to a local server and reload pages upon receiving a message. No data exfiltration, tracking, or remote code loading occurs. The publisher is trusted, the code is open-source, and the behavior matches the stated purpose. The bundled manifest differs from the published listing, but no malicious intent was found.

Live Server Web Extension

Live Server Web Extension Chrome extension security report

ID: fiegdmejfepffgpnejdinekhfieaogmj

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
2.0.0
Size
0.03 MB
Rating
4.0/5
Reviews
68
Users
200,000
Type
Extension
Updated
Dec 26, 2024
Category
Developer tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
ritwickdey
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
200,000

Screenshots & videos

Install growth

Item
Type
Severity
Description
http://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
https://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.

40 indicators in this extension

40 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Makes your existing server live. This is a browser extension that helps you to live reload feature for dynamic pages

Read the publisher’s full description

Live Server - Makes your existing server live - this is a Web Extension that helps you to live reload feature for dynamic content (PHP, Node.js, ASPNET -- Whatever, it doesn't matter). This extension is for Live Server (VSCode Extension - required v3.0.0+). You have to install Live Server extension for vscode in order to use this Add On. Follow this link to setup : https://github.com/ritwickdey/live-server-web-extension#setup Note: This is an open source project and it doesn't collect *any* data. Demo : https://raw.githubusercontent.com/ritwickdey/live-server-web-extension/master/img/screenshots/live-server-web-extension.gif

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
36
IPv4
1

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

40 indicators in this extension

40 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.4.0
Latest
0.42 MBNo malware found0
62dff8794ecf11255fdeb527677f52a6a55d17edf368dd559d56477c80ed39b9
1.3.0
0.02 MBNot scanned—
f1bfb8e9a232987580777fecfd5c7c4979f769448eccbc9d58d28fd9b58c45a0
2.0.0
0.03 MBNot scanned—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
Showing 1 to 3 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Developer Tools